Appln. No. 09/688,687 

Amd. dated September 30, 2004 

Reply to Office Action of 7/02/04 



REMARKS 

Claims 1-11, 25, 28-36 and, are pending in the present application; claims 12- 
24, 26 and 37-39 having been cancelled and claim 40 having been added herein. The Office 
Action and cited references have been considered. Favorable reconsideration is respectfiilly 
requested. 

Before discussing the Examiner's comments on the merits, it should be noted 
that certain minor amendments were effected in the Claims for clarity only. 
Claim 1: 

• recites a site [ sit e s ] The description (see, e.g. discussion with reference to Fig. 2 
- Web page 203), provides support for trusting also a single site. 

• The term " each ono of said at least two of said declarations is not associated 
with at least ofte two respective symbols". This amendment was effected for 
clarity suggesting that at least two different declarations are associated with 
(different) at least two symbols. Note that there may be (optionally) additional 
declarations, not necessarily bound by the latter feature. Support can be found 
e.g. in the description with reference to Fig. 2 where different symbols (by this 
example 206 , 207 and 208) are associated with respective different declarations 
(one "IBM company" - see page 9 lines 2-3, one "Visa approve" 207 and one 
"Rated by RSAC", see page 1 1 lines 2-5). 

• At least one credential. This amendment is effected for clarity. Support can be 
found for instance in Fig. 2 where more than one credential 211 is used - see 
also page 9 lines 1 1,12, to wit: "(^ g- certificates (211) collected fi-om crediting 
authorities (202))". - Note that the terms certificate and credential are used 
interchangeably. 
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Claim 2: 

• " at least one credential" and the other amendments in the Claims t were effected 
for clarity and consistent with Claim 1 . 

Claim 7: 

• at least ene two symbols. Amendment effected for clarity and consistent with 
Claim 1. 

Claim 8: 

• at least efie two symbols. Amendment effected for clarity and consistent with 
Claim 1. 

Claim 25: 

• Similar amendments as in Claim 1 were effected. 

Claims 12-24, 26, 37-39 are canceled without prejudice. New Claim (40) was 
added. Claim 40 recites the use of "advanced policy" (similar as original Claim 26, now 
canceled). Claims 28, 30, 32, 33 were modified to indicate the correct Claim dependencies. 

Turning now to the merits, the Examiner contents that Claim 1 is anticipated 
(under §102(e) by Arent (US 6,018,724). 

Note that Arent is in the general field of authenticated data related to on-line 
transactions, for example in connection with items offered to sale via the Intemet (Col. 2 
lines 50-5 1). According to Arent, in the general context of the data authentication, it is 
possible to display a so-called certification indicator indicating that the site under 
consideration is certified. Such an indicator is illustrated in Fig. 5 (see 500) and displayed in a 
Web page 100 (Fig. 6). It may include different components (such as graphics 710, Audio 
720 and user defined text 730 (see Fig. 7). Note that the teaching of Arent is confined to a 
single (possibly complex) symbol. 
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The concept of using a symbol (or certification indicator) as in the case of 

Arent is known per se and, in fact, already discussed in the "background of the invention" 

section of the present application. Thus, it is known to depict in the Browser a "broken key" 

or "complete key" symbol, indicating that the site under consideration is not secured or 

secured (respectively), (see, e.g. page 2 line 18 to page 3 line 11). The limitation of the latter 

approach was summarized inter alia, in page 2 lines 12 to 17 to wit: 

'The latter approach is associated with some inherent limitations, 
including (i) the proposed scheme applies only to a single predefined 
unconjigurable symbol having a given meaning (i.e. a symbol of a key 
which is rendered complete to indicate that the specified site is 
^'secured"); ' 

Note incidentally, that the reference to a single symbol according to the prior 
art referred in the application to a so called un-configured symbol. Arent discloses a so called 
configured symbol, namely allowing the user to modify the symbol (e.g. by incorporating 
user defined text). Still, while Arent offers a different type of symbol compared to the prior 
art, they both share a common drawback of using a single symbol. In contrast, in accordance 
with the invention two or more symbols are provided. 

In contrast, in accordance with certain embodiments of the invention, two or 
more symbols are displayed each verifying one or more declaration. For instance, and as 
shown in a non-limiting manner in Fig. 2, symbol 206 indicates that the declaration that the 
company name is IBM is verified (see page 9 lines 1 to 5), symbol 207 indicates that the 
declaration ^'Visa approved' is verified and the symbol 208 indicates that the declaration 
'"rated by RSAC is verified. The advantage and flexibility of using two or more symbols is, 
amongst the other, that the site can provide various declarations about itself and display 
designated symbols in respect of these declarations (see, e.g. discussion in page 13 lines 25 
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to 30). Another non limiting example is illustrated in Fig. 8, where "kids OK", "Visa OK 
seller", "known company" and "Privacy OK" declarations, having each a designated symbol. 
The ability to allocate few symbols, each associated with different verified declaration(s) is 
advantageous insofar as the user is concemed enabling him to readily identify whether the 
site conforms with declarations of interest. Obviously, an attempt to consolidate these 
declarations within one symbol (as in the prior art including Arent) is not convenient insofar 
as the user is concemed. Thus, consider a single symbol that needs to verify (i) a known 
company, (ii) VISA OK seller, (iii) Privacy OK and (iv) Kids OK. The latter example 
illustrates (in a non limiting manner) that consolidation of declarations (within one symbol) 
hinders on the user to readily identify the individual declarations. 

Note that Claim 1 was amended to explicitly recite that ''at least two of said 
declarations are associated with at least two respective symbols Note that this amendment 
was effected for clarity only. Applicants maintain that the original language of Claim 1 : "... 
each one of said at least two declarations is associated with at least one symbol... " also 
suggests that there are at least two symbols. 

Bearing this in mind, attention is drawn to the Examiners contention in the 
official Action. 

In particular Applicants respectfully traverse the Examiners contention that 
"each one of said at least two declarations is associated with at least one symbol" is 
anticipated in Arent. Obviously the Examiner recited the original Claim language (currently 
amended). The Examiner refers to Arent's Column 1 lines 58-66 and Col. 4 lines 14 to 20. 
Column 1 discloses usage of a single symbol i.e. ''the centrally provided graphic element is 
graphic image, for example an image of an official seal.. " (Col. 1 lines 57-58). It is further 
disclosed that "the user defined text overlay is a user defined text... Note that this user 
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defined text forms part of the single symbol (see, e.g. text 520 of the symbol 500). CoL 4 in 

lines 14 to 20 also discloses the use of a single symbol to wit: 

''If there is no additional data to be certified, a certification indicator 
indicating successful certification is displayed to the user at step 270. 
An example of a certification indicator that indicates successful 
certification is symbol 400 of Fig. 4. In the example of Fig, 4, 
certification indicator 400 is displayed by the user 's access device as 
a graphic that floats above merchant web page 100'\ 

As readily shown in Fig. 4, symbol 400 is a single symbol. 

As specified above, the use of a single symbol is known per se and was 
discussed in detail in the background of the invention section of the present application. 

The Examiner fiarther indicated that the feature "and displaying in respect of 
each verified declaration the corresponding at least one ( two respective - currently amended) 
symbols" is anticipated by Arent. hi support, the Examiner referred to Col. 4 lines 6 to 20. 
As discussed above, lines 14 to 20 refer to a single symbol and lines 6 to 13 do not suggest 
the use of more than one symbol. 

It is accordingly submitted that at least the specified features of Claim 1 are 
not anticipated hy Arent, and accordingly it is respectfiilly requested that the rejection under 
§ 102(e) be withdrawn. 

Claims 2-1 1, are directly or indirectly appended to Claim 1 and accordingly 
the rejection should be withdrawn inter alia, for the reasons discussed with reference to 
Claim 1. 

Li respect of Claim 25, Applicants maintain that the feature "at least two of 
said declarations are associated with at least two respective symbols" (as currently amended 
for Clarity), is not anticipated by Arent. The reference of the Examiner to Col. 1 lines 58-66 
and to Col. 4 lines 6 to 13 was discussed with reference to Claim 1. 
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Moreover, the feature "and displaying in respect of each verified declaration 
the corresponding at least eae ( two respective - currently modified) symbols" is also not 
anticipated by Arent, as discussed with reference to Claim 1, above. In respect of the latter 
feature, the Examiner refers to Col. 19 lines 52-58. In Col. 19 lines 52-55 it is stated that 
'*The seal of trust with Jo 's unique alphanumeric Code of Trust appears at the bottom of Jo 's 
Wallet to ensure Jo that the Disney site is authentic and trusted". The specified section 
mentions another symbol ''A wells Fargo VISA™ card graphic is displayed, , (lines 55-56). 
Note that the latter symbol is not related to the Disney site and a fortiori, does not 
authenticate any declaration in respect of the Disney site. This symbol merely indicates the 
fact that the monetary transaction using Wells Fargo Bank VISA card (to, say the VISA site) 
is authenticated. In other words the two symbols refer to different site, namely the seal of 
trust with Jo s unique alphanumeric Code of Trust authenticates the Disney site whereas the 
A Wells Fargo VISA™ card graphic is just part of the Wallet saying that this wallet was 
downloaded fi*om Well Fargo Bank. Note that the other symbol (being part of the wallet) 
would be displayed in the user's Wallet regardless of whether the site is authenticated or not. 
(Note in this connection that the "Visa approved" symbol 207 [referred to above with 
reference to Fig. 2 of the present application] would only be displayed when the user browse 
the site if the site was verified to comply with the VISA approved declarations. For a better 
understanding consider the following scenario: if VISA did not authenticate the Disney site, 
the VISA symbol would nevertheless appear in the System of Arent since the wallet was 
downloaded to the user's machine fi-om the Well Fargo bank. In accordance with the 
invention, since the Disney site was not authenticated by VISA, the VISA approved symbol 
will not appear). 
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It is also recalled in this connection that Claim 25 (currently amended) recites 
"a method for trusting a site ...for verifying at least two declarations in respect of a site.... at 
least two of said declarations are associated with at least two respective symbols Li other 
words, the symbols are associated with verified declarations in respect of a given site. 

Claim 25 further recites ''the proxy node authenticating the site and testing 
said at least one credential against the policy''. As to the latter feature, the Examiner refers 
to Col. 3 lines 55-63, however, nothing in the cited section suggests that the authentication is 
performed by the Proxy. Li contrast, Col. 10 lines 12-16, Col. 3 lines 28 to 42 and others of 
Arent all teach that the Wallet must reside locally on a user's machine and authentication is 
performed at the user end and not at the proxy. The concept of authenticating at the user end 
is in agreement with the electronic Wallet used in Arent. The use of proxy (in certain 
embodiments of the invention) provides advantages, such as: (i) the proxy can serve a 
variable number of users substantially without imposing any overhead at the user end, 
thereby providing ease and flexible system configuration, (ii) an enhanced security can be 
accomplished since the single (or few) proxy machines can be better protected compared to 
(possibly many) end-user's machine. 

It is accordingly submitted that at least the specified features of Claim 25 are 
not anticipated hy Arent ^ and accordingly it is requested that the rejection under § 102(e) be 
withdrawn. 

Claims 27, 29 and 31 and 34-36 are directly appended to Claim 25, and 
accordingly the rejection should be withdrawn inter alia, for the reasons discussed with 
reference to Claim 25, 
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In light of the foregoing discussion, a favorable action is respectfully 

requested. 

If the examiner has any questions, he is invited to contact the undersigned at: 

202-628-5197. 

Respectfully submitted, 

BROWDY AND NEIMARK, P.L.L.C. 
Attorneys for Applicant 




Registration No. 3 1 ,979 

RSJrjec 

Telephone No.: (202) 628-5197 
Facsimile No.: (202) 737-3528 
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